threat-intel
Vishing Extortion Group UNC6671 Rebrands After Making Millions
High
Summary
UNC6671, an extortion group previously known as BlackFile, has rebranded and continued its operations under multiple names (Redact, Pink, Helix, and Falcon) while targeting sectors like financial services and private equity. The group uses sophisticated vishing tactics, including impersonating IT helpdesk employees and leveraging adversary-in-the-middle (AiTM) techniques to bypass MFA and gain access to cloud environments, resulting in over $10 million in ransom payments.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data